Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20252/2CJ9VVSyUuhK8uTdUgaGVySEZBw.roa
File:                     2CJ9VVSyUuhK8uTdUgaGVySEZBw.roa (raw, json)
Hash identifier:          ISIUREg38HI4jNWSIQ6Xi0U5fNjcs+ANe+7tqfR9PrY=
Subject key identifier:   D8:22:7D:55:54:B2:52:E8:4A:F2:E4:DD:52:06:86:57:24:84:64:1C
Certificate issuer:       /CN=46C1CC2D65283BE3810719F5EA1A8790303A2279
Certificate serial:       09
Authority key identifier: 46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/2CJ9VVSyUuhK8uTdUgaGVySEZBw.roa
Signing time:             Sat 25 May 2024 16:50:22 +0000
ROA not before:           Sat 25 May 2024 16:50:22 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     151382
IP address blocks:        157.15.254.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 13 Aug 2024 18:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46C1CC2D65283BE3810719F5EA1A8790303A2279
        Validity
            Not Before: May 25 16:50:22 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=D8227D5554B252E84AF2E4DD520686572484641C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4a:75:ee:a2:5d:f2:f4:c4:35:1a:3e:19:68:
                    13:44:ad:80:ee:2a:18:a3:e1:7c:d3:47:3c:64:5b:
                    e3:e6:c2:23:ae:54:82:ab:f6:f4:ea:4b:e1:cb:5b:
                    7c:d9:3d:47:d8:0a:5a:c7:1b:ef:03:5d:c3:03:b7:
                    d3:bd:ca:09:7e:ad:51:2a:98:8f:d1:12:c2:22:eb:
                    39:0e:0c:03:66:83:9b:35:55:3b:64:39:46:3f:00:
                    59:6e:f0:e4:91:64:42:19:54:a2:09:88:a7:6a:a0:
                    98:c6:0c:44:4f:aa:9e:d7:f5:b2:4a:93:80:58:d4:
                    e4:e9:87:ec:be:4b:78:db:4b:2a:b2:c6:04:4e:cd:
                    01:61:71:3c:b2:23:2f:14:db:fd:7f:37:17:2e:f5:
                    39:69:66:ed:b7:3a:d1:39:a8:95:ae:c1:6f:5a:a4:
                    ca:0b:09:b5:1c:8d:bf:f5:e0:11:e0:cb:a0:0f:a3:
                    b3:b2:3b:c4:58:ec:ac:c3:3a:14:a8:5b:cd:02:0b:
                    7c:22:dc:d3:19:56:b2:d1:42:88:64:90:26:2c:91:
                    21:da:96:20:f1:10:4a:a9:67:29:ce:ee:6f:a3:b2:
                    a1:5f:16:61:82:4e:74:73:5f:60:09:15:39:a3:67:
                    e3:db:1e:9f:3b:da:00:66:36:09:96:f8:fc:63:a8:
                    39:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:22:7D:55:54:B2:52:E8:4A:F2:E4:DD:52:06:86:57:24:84:64:1C
            X509v3 Authority Key Identifier:
                keyid:46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/2CJ9VVSyUuhK8uTdUgaGVySEZBw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:81:5d:b2:8d:81:5a:c4:b4:63:09:c3:b4:25:9a:70:d6:ca:
         cb:e9:97:86:7f:12:81:7c:4c:64:09:97:18:ad:bc:3d:1f:73:
         bb:d2:a3:a3:54:75:76:8d:a1:e7:56:02:70:5d:b0:7b:5f:75:
         d5:ac:9c:d0:37:ac:c7:61:f1:9e:40:e2:81:44:25:ab:b1:56:
         a4:65:53:71:bb:c5:6a:ab:0e:b5:5b:8e:f4:f7:8e:27:f7:82:
         b2:1f:da:64:ae:94:3e:5d:7c:c4:41:3b:61:be:4f:88:c5:a9:
         cb:02:44:15:db:72:d2:4e:45:54:06:a2:f4:9a:22:c6:25:a7:
         53:06:fb:4c:bd:8e:1b:66:fa:5b:d1:46:b8:9c:58:9c:07:70:
         bc:43:52:df:4e:12:02:56:cb:1e:9e:f5:9a:7e:1f:4a:e4:dc:
         fb:96:29:14:c8:5d:75:8e:f9:25:19:ac:7a:03:b6:f5:31:88:
         62:ed:c4:21:90:e3:64:7c:d4:1a:1f:d2:e6:7c:29:aa:b4:80:
         ee:b9:a4:b6:35:4d:dc:24:cb:6a:6b:c4:30:41:fd:df:db:dd:
         96:74:ec:d8:f6:ee:29:e5:bd:72:cd:d4:60:f8:02:ab:80:d1:
         f7:fe:fe:e3:f0:08:11:bb:c9:af:e3:19:55:1d:7f:58:2d:74:
         89:38:6b:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 13 22:07:14 2024 by rpki-client on console-ams.rpki-client.org